Update: A Better Way! I found a much better, easier way to do this with Ansible. Read about that in this article. I think my enthusiasm for wanting to experiment with User Data made things a little tougher here, but I learned a few things.
“ubuntu” has no password I wanted to bootstrap a server on an AWS EC2 instance in a fairly secure way, giving passwordless sudo to a user so that I could install software with Ansible.